Vendor profile

Whistic: where is customer data stored and processed?

Whistic stores and processes customer data in the USA, according to its privacy notice, which says it relies on US-based cloud infrastructure for all customer groups outside the EU/EEA. Analytics and metadata are processed in the USA as well, and logs and telemetry such as IP addresses and device data are handled there too. Customers cannot choose region, and no transfer basis (DPF, SCC or BCR) is stated. Customer group is not specified in the source, so this cannot be confirmed as a business product. The data processing agreement is listed on the trust center but was not opened, so its data location is unconfirmed. Backup location, identity/SSO provider and region, and support staff access location are not stated.

Checked 10 October 2026 · based on the vendor's own public documents

Where data is stored and processed

Only outside the EU/EEA, with no European alternative stated: Storage, Analytics and metadata, Logs and telemetry.

Ownership and agreements

Sources

• Whistic Privacy Policy | How We Use Your Data